Skip to content

ci(deps): update dependency helm to v4 - #527

Merged
jdwillmsen merged 1 commit into
mainfrom
renovate/helm-4.x
Oct 26, 2026
Merged

ci(deps): update dependency helm to v4#527
jdwillmsen merged 1 commit into
mainfrom
renovate/helm-4.x

Conversation

@renovate

@renovate renovate Bot commented Oct 24, 2026

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
helm uses-with major v3.21.3 → v4.3.1

Release Notes

helm/helm (helm)

v4.3.1: Helm v4.3.1

Compare Source

Helm v4.3.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
Installation and Upgrading

Download Helm v4.3.1. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.3.2 and 3.22.2 are the next patch releases scheduled for November 11, 2026
  • 4.4.0 is the next minor release scheduled for January 13, 2027. There will be no further Helm 3 minor releases (see https://helm.sh/blog/helm-v3-end-of-life)
Changelog
  • chore(deps): bump otlploghttp and stdoutlog to v0.21.0 c0d08d0 (Terry Howe)
  • chore(deps): bump the k8s-io group across 1 directory with 7 updates 0c0146e (dependabot[bot])
  • fix: bump golang.org/x/net to v0.61.0 (#​32758) dd91731 (Terry Howe)
  • fix(linters): update golangci-lint to v2.14.0 (#​32744) 3a376b2 (Ruslan Shaydullin)
  • fix(action): wait for CRD establishment under HookOnlyStrategy (#​32672) 5fed6a5 (Pujitha Paladugu)
  • chore(deps): bump sigs.k8s.io/controller-runtime from 0.25.1 to 0.25.2 (#​32726) b227bf4 (dependabot[bot])
  • chore(deps): bump sigs.k8s.io/kustomize/kyaml from 0.21.1 to 0.21.2 (#​32715) af79b8e (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc ab6b245 (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp (#​32665) 0f20617 (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc (#​32664) e26e158 (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace (#​32663) 23ab1c5 (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 (#​32662) 8303180 (dependabot[bot])

v4.3.0: Helm v4.3.0

Compare Source

Helm v4.3.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
Installation and Upgrading

Download Helm v4.3.0. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.3.1 and 3.22.1 are the next patch releases scheduled for October 14, 2026
  • 4.4.0 is the next minor release scheduled for January 13, 2027. There will be no further Helm 3 minor releases (see https://helm.sh/blog/helm-v3-end-of-life)
Changelog
  • chore(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 bec5b06 (dependabot[bot])
  • chore(deps): bump the k8s-io group across 1 directory with 6 updates d0d42e7 (dependabot[bot])
  • bump version to 4.3 (#​32605) 7328f42 (Scott Rigby)
  • chore: Fix independent-merge lint issues ca6681c (George Jenkins)
  • refactor(repo): Use byte buffer to build index file (#​32579) 37752b7 (Tom Wieczorek)
  • chore: fix gofumpt extra-rules (#​32486) 28e64bd (Matthieu MOREL)
  • Remove deprecated internal/chart/v3/ code (#​32365) 4dfbaa4 (George Jenkins)
  • fix(template): regression - route registry messages to stderr in template and show (#​32217) 9a3c040 (Aaron Mark)
  • refactor: remove per-file decompression size limit (#​31748) 11e2010 (Benoit Tigeot)
  • Updating the Go version b5b498b (Matt Farina)
  • Updating the Go version 6d1f67c (Matt Farina)
  • chore(deps): bump the github-actions group across 1 directory with 4 updates (#​32574) 0f4decb (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates (#​32572) fb19300 (dependabot[bot])
  • fix: correct 'doest not match' in readiness debug logs 6888b0a (MsfPablo)
  • fix(provenance): support GnuPG keybox (pubring.kbx) keyrings (#​32281) 67d54fd (Ruslan Shaydullin)
  • chore(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#​32562) e9b85e4 (dependabot[bot])
  • chore(deps): bump the github-actions group across 1 directory with 4 updates (#​32556) c000a40 (dependabot[bot])
  • chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#​32555) bafdcde (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#​32545) 2a29f17 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.40.0 to 0.41.0 (#​32543) edb94f8 (dependabot[bot])
  • test(loader): cover 8192-byte EOF boundary for LoadValues fd4ed49 (Dean Chen)
  • fix(loader): do not drop values files ending at a 4096-byte boundary 601445e (Dean Chen)
  • chore(deps): bump the github-actions group with 4 updates (#​32523) f3d68cd (dependabot[bot])
  • fix: bump go.opentelemetry.io/otel to v1.44.0 for GO-2026-5158 (#​32521) a0c2f6d (Terry Howe)
  • chore(deps): bump github.com/santhosh-tekuri/jsonschema/v6 (#​32514) f8a308c (dependabot[bot])
  • chore(deps): bump the github-actions group with 4 updates 47eb219 (dependabot[bot])
  • chore(deps): bump the github-actions group with 4 updates (#​32508) ae877c8 (dependabot[bot])
  • test(action): poll for the interrupted install goroutine instead of a zero-margin sleep (#​32328) a8ab76e (Nikolaus Schuetz)
  • chore(deps): bump actions/stale in the github-actions group (#​32487) ac1c687 (dependabot[bot])
  • test(package): fix errorlint + exact path match in lock test e923167 (Ilya Kiselev)
  • fix(chart): normalize StampModTimes timestamp + Chart.lock test 3c3be92 (Ilya Kiselev)
  • chore(deps): bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 ce27485 (dependabot[bot])
  • fix(scripts): clarify cache-busting behavior bc0114c (Solomon Wakhungu)
  • chore: fix gofumpt issues 24bbb46 (Matthieu MOREL)
  • fix(scripts): address cache-busting review feedback bbaf420 (Solomon Wakhungu)
  • Make golangci-lint happy f3edb83 (MrJack)
  • Added missing import 94a3315 (MrJack)
  • Readded "unicode/utf8" 500f02d (MrJack)
  • Potential fix for pull request finding f1ede7c (MrJack)
  • Apply suggestions from code review 4fcc4e4 (MrJack)
  • refactor(rollback): validate description length before cluster reachability check 91520a7 (MrJack)
  • refactor(test): reuse existing rollback.txt golden file e73dfab (MrJack)
  • Removed extra space in rollback-with-description.txt b177a8e (MrJack)
  • Enhance rune count in pkg/cmd/rollback.go and pkg/action/rollback.go a92611c (MrJack)
  • Use rune count to count properly multi-byte UTF-8 characters 8a34f3b (MrJack)
  • Enhanced rollback description length cb91040 (MrJack)
  • Changed if construction e69e424 (MrJack)
  • Set 256 as limit for maxDescriptionLength. 256 comes from MAX value for key and value b606955 (MrJack)
  • feat(rollback): add --description flag to provide rollback reason f8180e6 (MrJack)
  • Update resource_test.go 622f16b (Matthieu MOREL)
  • Update labels_test.go 61d99a8 (Matthieu MOREL)
  • Update chartrepo_test.go 532eabf (Matthieu MOREL)
  • Update show_test.go bfca068 (Matthieu MOREL)
  • Update rollback_test.go b59dfd3 (Matthieu MOREL)
  • Potential fix for pull request finding a27f3a0 (Matthieu MOREL)
  • chore(pkg): refactor: finer tests conversions to testify part 1 828d01a (Matthieu MOREL)
  • chore(pkg): refactor: finer tests conversions to testify part 3 9a2be11 (Matthieu MOREL)
  • chore(pkg): refactor: finer tests conversions to testify part 2 4d9c03f (Matthieu MOREL)
  • chore(internal): refactor: finer tests conversions to testify part 1 5142ca8 (Matthieu MOREL)
  • chore(deps): bump the k8s-io group across 1 directory with 7 updates (#​32459) 8f74dce (dependabot[bot])
  • chore(deps): bump ossf/scorecard-action in the github-actions group (#​32458) 050d3e9 (dependabot[bot])
  • chore(deps): bump the github-actions group with 4 updates ea7c838 (dependabot[bot])
  • chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 fe3f98b (dependabot[bot])
  • chore(deps): bump actions/labeler from 6.2.0 to 7.0.0 (#​32441) ed246e2 (dependabot[bot])
  • chore(deps): bump github/codeql-action/upload-sarif (#​32440) 5223cea (dependabot[bot])
  • chore(deps): bump github/codeql-action/autobuild from 4.37.1 to 4.37.2 a0f954e (dependabot[bot])
  • chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.2 cdccef4 (dependabot[bot])
  • chore(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.2 065d3a6 (dependabot[bot])
  • chore: group github-actions dependabot updates cd4c5d3 (Terry Howe)
  • chore(pkg): refactor: convert tests to testify assert/require part 19 33c2839 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 22 0b1aa55 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 21 a934b82 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 20 1d4665e (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 18 fb8a62b (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 16 0fa9f7d (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 17 4073566 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 15 7173365 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 14 dc66ee7 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 13 aae82bf (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 12 a3fa28a (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 11 dc3e3a5 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 10 2f5a33f (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 9 13d1edc (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 8 e5f0e07 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 7 ca1767b (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 2 0daa77f (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 1 d4ec8e9 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 6 0844b3b (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 5 3ff05c8 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 4 658a8fa (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 3 df2d013 (Matthieu MOREL)
  • chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#​32411) 8c7f3a1 (dependabot[bot])
  • chore(internal): refactor: convert tests to testify assert/require part 4 (#​32408) 6c45810 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 3 668e7e5 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 5 f1d5979 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 6 f3402c1 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 1 ba31ca0 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 2 615a299 (Matthieu MOREL)
  • fix: pass registry client to downloader.Manager in upgrade 0604d8f (Gates Wang)
  • perf: enable concurrent status computation to prevent multi-minute delays (#​32043) 3bcf965 (Zhaofeng Miao)
  • remove legacy import comments from remaining packages (#​31933) 82be04d (Abhay Chaurasiya)
  • Potential fix for pull request finding c2fda5a (Terry Howe)
  • fix: enhance error handling and improve test assertions (#​32352) a2b1a60 (Matthieu MOREL)
  • fix(scripts): add cache-busting to get-helm-3 version check 5a30c7a (Solomon Wakhungu)
  • chore(deps): bump github/codeql-action init and analyze to 4.37.1 0563162 (Terry Howe)
  • chore(deps): bump github/codeql-action/upload-sarif (#​32378) 06b9586 (dependabot[bot])
  • chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#​32376) a494169 (dependabot[bot])
  • chore(deps): bump github/codeql-action/autobuild from 4.37.0 to 4.37.1 eeb37ed (dependabot[bot])
  • chore: Add AI Vendor specific paths to .gitignore 8cd3a48 (George Jenkins)
  • ci: auto-label PRs targeting main with v4.x 9f3c89a (Benoit Tigeot)
  • fix: 'gocritic: filepathJoin path seperator' lint error 96a25ab (George Jenkins)
  • chore(internal): refactor: convert tests to testify assert/require part 3 caac755 (Matthieu MOREL)
  • feat: honor SOURCE_DATE_EPOCH for chart archives (#​32162) ad93b7d (Lohit Kolluri)
  • Fix missing conflict retry with server-side apply (#​32088) aa1ae3a (Jakub Jaruszewski)
  • chore: fix elseif and ifElseChain issues from gocritic (#​32289) a02a571 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 2 f280d9c (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 1 d72b28e (Matthieu MOREL)
  • fix(ci): pin govulncheck-action to the v1.1.0 release (#​32304) 68977ec (秀吉)
  • ci: track GitHub Actions updates on dev-v3 via Dependabot b963afa (Terry Howe)
  • chore(deps): bump actions/stale from 10.3.0 to 10.4.0 (#​32330) fb53c00 (dependabot[bot])
  • chore(deps): bump github.com/mattn/go-shellwords from 1.0.13 to 1.0.14 (#​32334) dad026a (dependabot[bot])
  • chore(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 (#​32333) 84e63e5 (dependabot[bot])
  • Address review comments 73c1fb2 (Matheus Pimenta)
  • Fix vanishing empty lines bfebbb7 (Matheus Pimenta)
  • fix: add missing https:// to Oracle link in ADOPTERS.md (#​32324) 7b9a5c8 (Akanksha Trehun)
  • fix: remove trailing whitespace in .golangci.yml (#​32325) cfa3b24 (Akanksha Trehun)
  • fix(Makefile): update outdated .sha256 comment for Helm v4 (#​32323) a91e9f6 (Akanksha Trehun)
  • feat(linters): add new revive rules for better code quality 16787d6 (Matthieu MOREL)
  • refactor: enable several checks from gocritic 9662fdd (Matthieu MOREL)
  • fix(linters): update golangci-lint to 2.12.2 7bfcdb0 (Matthieu MOREL)
  • chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.0 8118a4d (Terry Howe)
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 0fc3b93 (Terry Howe)
  • chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.0 71901a4 (Terry Howe)
  • chore(deps): bump github/codeql-action/init from 4.36.2 to 4.37.0 (#​32313) a71eb99 (dependabot[bot])
  • chore(deps): bump github/codeql-action/autobuild from 4.36.2 to 4.37.0 (#​32305) ea52bdf (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.39.0 to 0.40.0 (#​32309) a242855 (dependabot[bot])
  • chore(deps): bump github/codeql-action/upload-sarif (#​32311) f25f955 (dependabot[bot])
  • Potential fix for pull request finding ed651de (Benoit Tigeot)
  • fix(ci): resolve Node 20 deprecation in govulncheck ca24a55 (Benoit Tigeot)
  • chore(deps): bump golang.org/x/text from 0.38.0 to 0.39.0 e3fbe2e (dependabot[bot])
  • chore: fix emptyStringTest, nestingReduce and singleCaseSwitch checks issues from gocritic 96b315f (Matthieu MOREL)
  • Update pkg/cmd/history_test.go c1569ea (Matthieu MOREL)
  • test: replace assert.Equal with require.EqualError for improved error handling 65077c1 (Matthieu MOREL)
  • test: replace assert.Contains with assert.ErrorContains for better error handling 4ade4a5 (Matthieu MOREL)
  • chore: fix several checks issues from testifylint f34ad6c (Matthieu MOREL)
  • test(cli): use t.Cleanup for resetEnv with t.Setenv 47bde11 (LarytheLord)
  • test(cli): isolate user-agent rest config test from host kubeconfig 9b30076 (LarytheLord)
  • chore: fix several checks issues from gocritic 07259ec (Matthieu MOREL)
  • fix(engine): prevent Files.Lines panic on empty file 143631f (Mahesh Sadupalli)
  • Potential fix for pull request finding d539556 (kimsungmin1)
  • chore(deps): bump github/codeql-action/upload-sarif e9eda8c (dependabot[bot])
  • fix(registry): resolve golangci-lint issues in token-auth tests 503acff (kimsm28)
  • chore: go mod tidy after rebase on main 4e9ca06 (kimsm28)
  • fix(registry): use plain-http registry in token-auth scope test 3cbee7e (kimsm28)
  • Update pkg/registry/client.go 26ada49 (Terry Howe)
  • test: improve client_scope_test.go to avoid data races and brittle assertions 9b7a70f (kimsm28)
  • fix typos in withScopeHint function comment ee181f4 (kimsm28)
  • fix registry test failures by adjusting DockerRegistryHost and auth server listener management 1f0a728 (kimsm28)
  • fix variable naming requestUrl -> requestURL 8883c9c (kimsm28)
  • fix typo, remove unnecessary code, fix to avoid to use the assertion in http hanlder 530e728 (kimsm28)
  • change suite.Nil, suite.NotNill to more proper function(suite.NoError, suite.Error) 26e5071 (kimsungmin1)
  • change client_scope_test.go to use httptest 8c8d6e3 (kimsungmin1)
  • fix typo 9d77ccd (kimsungmin1)
  • remove freeport dependency fc743b2 (kimsungmin1)
  • add newline in license header 319e06c (kimsungmin1)
  • fix scope when helm push to a registry that use token auth 301e3a1 (kimsungmin1)
  • chore(deps): bump github.com/fluxcd/cli-utils from 1.2.1 to 1.2.2 5a9b8a7 (dependabot[bot])
  • chore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 f76136d (dependabot[bot])
  • Potential fix for pull request finding 144246c (George Jenkins)
  • chore(deps): bump actions/setup-go from 6.4.0 to 6.5.0 07faec5 (dependabot[bot])
  • Apply suggestions 61bba7c (Will Noble)
  • Properly format the extra field in gzipped packages d887779 (Will Noble)
  • refactor(internal): convert tests to testify assert/require addbab2 (George Jenkins)
  • refactor(internal/release): convert tests to testify assert/require 7ab295f (George Jenkins)
  • refactor(pkg/release): convert tests to testify assert/require 4cce0e9 (George Jenkins)
  • refactor(pkg/registry): convert tests to testify assert/require 8b0a167 (George Jenkins)
  • refactor(internal): convert tests to testify assert/require 3ce02c5 (George Jenkins)
  • refactor(repotest): convert tests to testify assert/require b42faba (George Jenkins)
  • chore: enable contextcheck, fatcontext and noctx linters 34cfdfd (Matthieu MOREL)
  • chore(deps): bump github.com/cyphar/filepath-securejoin a0c7d1e (dependabot[bot])
  • chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 5848047 (dependabot[bot])
  • test: use assert.Empty for zero-length assertions in validate_test c36e4d5 (Terry Howe)
  • docs: fix typo in helm version command description dd442c0 (s3onghyun)
  • chore(deps): bump the k8s-io group across 1 directory with 7 updates fa68e6c (dependabot[bot])
  • chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 3d2ff2a (dependabot[bot])
  • refactor(pkg/strvals): convert tests to testify assert/require daa045d (George Jenkins)
  • refactor(pkg/cli): convert tests to testify assert/require 16b0760 (George Jenkins)
  • Revert "fix(kube): prevent spurious early exit in WaitForDelete during informer sync" d3bd091 (George Jenkins)
  • Update pkg/ignore/rules_test.go 9ad5620 (George Jenkins)
  • docs: improve CONTRIBUTING.md wording fa9cb49 (devShaik010)
  • refactor(pkg): convert tests to testify assert/require f4d713a (George Jenkins)
  • refactor(cmd/helm): convert tests to testify assert/require ed76a36 (George Jenkins)
  • chore: rename savedErr to clear its specific purpose 9c1d5a3 (Jeaeun Kim)
  • chore: fix lint 99baa2e (Jeaeun Kim)
  • chore: store err separately for clarity ea847fe (Jeaeun Kim)
  • chore: Improve error reporting for helm template --debug with --show-only 2014946 (Jeaeun Kim)
  • fix panic on repeated IsReachable calls 1f7869c (Mohammad Abdolirad)
  • fix: protect FailingKubeClient.RecordedWaitOptions from data race (#​31925) a5552ed (Terry Howe)
  • fix: route registry client output to stdout instead of stderr (#​32056) c2f1b23 (Terry Howe)
  • fix(engine): add debug logging when lookup returns empty (#​32205) 7058f84 (Ogulcan Aydogan)
  • chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 74c1702 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 33b4071 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 1019146 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 7f855df (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.36.1 to 4.36.2 c603c50 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.36.0 to 4.36.1 f8abbfd (dependabot[bot])
  • chore(deps): bump github.com/tetratelabs/wazero from 1.11.0 to 1.12.0 3aa1b74 (dependabot[bot])
  • Fix empty and len testifylint violations across test files 488c4a8 (Matthieu MOREL)
  • lower resync period 6dc1c1c (Austin Abro)
  • chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 7510b83 (dependabot[bot])
  • ci: enable bidichk linter to prevent invisible Unicode characters e679ec9 (Arnav Nagzirkar)
  • fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 54ae27f (Terry Howe)
  • chore(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 dbb3e35 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.5 to 4.36.0 60665e9 (dependabot[bot])
  • docs: update version status for v4 stable release 442e146 (Benoit Tigeot)
  • chore(deps): bump actions/stale from 10.2.0 to 10.3.0 ace245b (dependabot[bot])
  • fix(provenance): check error return in Digest e095e69 (Sebastien Tardif)
  • internal/plugin: remove zero-width spaces from plugin name comment 979e68f (Aleksei Sviridkin)
  • Renamed flag from show-rollback to show-rollback-revision d097d88 (MrJack)
  • fix: skip non-Pod test hooks in GetPodLogs 1a1ec6e (Gregory Man)
  • fix(upstream): upgrade to cli-utils 1.2.1, controller-runtime 0.24.1 and k8s 1.36.1 378ceac (Matheus Pimenta)
  • chore(deps): bump github.com/fluxcd/cli-utils from 1.2.0 to 1.2.1 b5a9299 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.4 to 4.35.5 f772ffe (dependabot[bot])
  • fix(repo): use structured slog args in index.go [ea2343e](https://redirect.github.com/helm/helm/commit/ea2343ebea

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "on saturday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Oct 24, 2026
@jdwlabs-review-bot

jdwlabs-review-bot Bot commented Oct 24, 2026

Copy link
Copy Markdown

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 2 🔵🔵⚪⚪⚪
🧪 No relevant tests
🔒 No security concerns identified
⚡ Recommended focus areas for review

Dependency Upgrade

The PR updates the Helm dependency from v3.21.3 to v4.3.1. While this is a major version upgrade, the change itself is limited to a workflow configuration file. However, since Helm v4 introduces breaking changes compared to v3, it's important to ensure that all Helm-related workflows and configurations in the repository are compatible with the new version. This includes verifying that any Helm chart rendering or deployment processes continue to function correctly with the upgraded version.

 
version: v4.3.1

@jdwlabs-review-bot

jdwlabs-review-bot Bot commented Oct 24, 2026

Copy link
Copy Markdown

PR Code Suggestions ✨

No code suggestions found for the PR.

@coderabbitai

coderabbitai Bot commented Oct 24, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@jdwillmsen jdwillmsen added risk/R2 merge-captain tag/ci merge-captain tag/platform merge-captain labels Oct 26, 2026
@jdwillmsen
jdwillmsen merged commit 0c2c424 into main Oct 26, 2026
22 checks passed
@jdwillmsen
jdwillmsen deleted the renovate/helm-4.x branch October 26, 2026 06:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jdwillmsen jdwillmsen Awaiting requested review from jdwillmsen jdwillmsen is a code owner
@jdwlabs-root jdwlabs-root Awaiting requested review from jdwlabs-root jdwlabs-root is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file Review effort 2/5 risk/R2 merge-captain tag/ci merge-captain tag/platform merge-captain

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jdwillmsen